Privacy Policy
Last updated: 15 September 2026
1. Information We Collect
Account information (email, and name/avatar if you sign in with Google), billing records and payment metadata, support communications, and technical data such as IP address, usage logs, and instance telemetry. If you register with an academic address, the domain of that address is also used to assess eligibility for academic credit (section 6).
2. How We Use It
To operate and secure the Service, process payments and issue invoices, provide support, send transactional and account notifications, and comply with legal obligations.
3. Payment Data
Card and payment processing is handled by our payment provider (ECPay). We do not store full card numbers on our servers.
4. Sharing
We do not sell your personal data. We share it only with service providers necessary to run the Service (e.g. payment processing, email delivery) and where required by law.
5. Retention
We retain account and billing records for as long as your account is active and as required for tax, accounting, and legal purposes. Vault storage for accounts at NT$0 or below is retained for 30 days after balance exhaustion, with staged notices, and then deleted unless the account is topped up.
6. Academic Credit (學研支援)
Accounts on a Taiwanese academic domain (a domain ending in .edu.tw) may receive a one-off credit grant. Eligibility requires two things: the domain of the address you have already given us, after that address has been verified, and — since 14 September 2026 — a photograph of your student or staff identity card (section 6a). Each grant is recorded on your billing ledger with its amount and date. An administrator may also grant this credit by hand, in which case the ledger records which administrator did so. We do not sell or share academic status with anyone.
6a. Verification of Academic Status (identity card photographs)
To receive academic credit you upload a photograph of your student or staff identity card. Providing it is optional: you may use the Service without it, and declining only means the academic credit is not granted. WHAT WE READ: the image is examined by software running on our own servers in Taiwan. It decides whether the image shows a student or staff identity card, and it reads THE NAME PRINTED ON THE CARD. It is not sent to any third party and is not used to train any model. We do not extract or record your national identification number or date of birth from it; please do not upload a national ID card. WHY WE KEEP THE NAME: the academic credit is one per person, and the name on the card is what lets us tell that two different email addresses belong to the same student. It is stored with your verification record, is visible only to staff handling a review or an appeal, and is deleted when your account is deleted. If a card whose holder has already received the credit is uploaded again, the verification is refused, the refusal says which of your addresses already claimed it, and you may appeal it once. HOW LONG WE KEEP IT, AND HOW: the photograph is retained for as long as your account exists, as the record supporting the credit granted to you, and is deleted when your account is deleted. It is stored encrypted, under a key kept separately from the stored files. Only staff handling an appeal may view it, and every such view is logged. AUTOMATED DECISION: the initial decision is automatic. If it goes against you, you may ask once for a person to review it; a human decision is final for this process and does not affect any other right you have under the Personal Data Protection Act. UNDER 18: do not upload an identity card without your parent or guardian’s agreement; a parent or guardian may ask us to delete it at any time.
7. Monitoring of Granted Credit, and Your Right to a Human Decision
Because academic credit is given rather than purchased, instances funded by it are subject to an automated check for cryptocurrency mining, which reads process names and command lines running on the GPU you have been allocated. Where mining is identified, unused granted credit may be revoked and — if no paid balance remains — the instance may be stopped. This is an automated process. You have the right to ask a person to review any such decision and to have it reversed if it was wrong: write to the address at the foot of this page and a human will re-examine the evidence. Money you have paid us is never revoked by this process, and the check applies only to granted credit.
8. Users Under 18
Some Taiwanese academic domains belong to primary and secondary schools, so we may hold accounts for people under 18. We ask for no more from these accounts than from any other — an email address and the usage records needed to run and bill the Service — and we do not knowingly collect identity documents, dates of birth, or national identification numbers from anyone. A parent or guardian may contact us at the address below to review, correct, or delete a minor’s account data, and we will act on such a request without requiring the account holder’s consent.
9. Security
We use industry-standard measures to protect your data, including encryption in transit and access controls. No method of transmission or storage is completely secure.
10. Your Rights
Subject to applicable law (including Taiwan’s Personal Data Protection Act), you may request access to, correction of, or deletion of your personal data by contacting us. Where a decision about your account was made automatically, you may also ask for it to be reviewed by a person (see section 7).
11. Cookies
We use essential cookies for authentication and session management. We do not use them for third-party advertising.
12. Changes
We may update this policy. Material changes will be notified via the Service or email.
Privacy questions? Contact support.gputw.ai@gmail.com.